Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147131.roa
File: AS147131.roa (raw, json)
Hash identifier: 8rT9jyDwDpjg6oJaAFebi+Isk4V2TRS9lAbV+Cnu5Sc=
Subject key identifier: 53:9B:D2:7D:6B:9C:20:35:48:38:A4:A4:B2:D2:16:BE:E7:CA:73:99
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 23D58D1C5B571D267B34FC510278BF2CB2D84114
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147131.roa
Signing time: Thu 23 Apr 2026 08:00:00 +0000
ROA not before: Thu 23 Apr 2026 07:55:00 +0000
ROA not after: Thu 22 Apr 2027 08:00:00 +0000
asID: 147131
IP address blocks: 2001:df1:1ac0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d5:8d:1c:5b:57:1d:26:7b:34:fc:51:02:78:bf:2c:b2:d8:41:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 23 07:55:00 2026 GMT
Not After : Apr 22 08:00:00 2027 GMT
Subject: CN=539BD27D6B9C20354838A4A4B2D216BEE7CA7399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:ea:20:37:a6:a0:62:19:dd:21:84:cd:af:
b8:bb:38:07:49:80:31:8f:10:57:e5:aa:4e:be:b3:
7a:4c:c1:3d:7f:c0:3f:04:ab:04:ad:15:7b:d4:bf:
be:06:db:4f:e1:4b:8c:19:32:85:2c:b8:99:1e:ce:
68:8e:e4:8e:c6:dd:3f:da:8a:39:2e:0e:47:3c:26:
be:3c:52:ee:7e:8e:f5:d4:cc:67:62:34:2a:a4:66:
ce:0e:8a:b9:1a:1a:e0:c0:7d:54:2d:69:2e:6b:5d:
4c:7a:b3:0b:d1:89:ab:8f:7c:f2:b0:87:c5:40:8a:
d5:96:8c:9a:ac:fe:83:72:bb:4e:60:08:cb:07:a2:
5a:ff:10:31:0b:95:e1:8d:2f:9a:8a:71:64:73:ba:
85:cb:c4:81:db:d3:7f:26:59:72:df:65:4d:b4:ab:
69:46:09:92:b2:6a:59:68:79:90:ad:1a:49:08:1f:
f2:f2:39:5b:79:3d:af:e7:11:1d:d6:90:3c:b5:c3:
e3:a1:f8:3c:af:11:35:0b:99:9b:44:34:22:f5:ea:
8b:4b:f5:d1:c8:59:78:03:94:75:15:02:85:56:e6:
da:0f:77:2d:ab:ce:3c:c5:d7:d7:2f:7f:19:d1:bb:
ea:25:3c:a3:3a:0a:19:bf:b1:2c:cf:0c:2b:55:63:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9B:D2:7D:6B:9C:20:35:48:38:A4:A4:B2:D2:16:BE:E7:CA:73:99
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:1ac0::/48
Signature Algorithm: sha256WithRSAEncryption
8a:b8:45:fc:68:5f:59:cb:9e:1f:c9:3e:5a:ee:64:a7:d6:8d:
38:eb:2e:d0:6f:1f:c8:5e:29:40:03:b3:6c:90:50:9f:43:f8:
ac:7e:d9:25:8e:c7:c9:42:25:87:68:0b:3a:ad:a1:4f:09:e2:
1c:d2:00:06:37:93:e8:2f:29:f0:89:ef:2f:19:f9:64:ed:8c:
61:e1:32:f9:d4:07:2a:08:bc:46:b7:a8:7b:74:97:4d:09:e8:
69:f5:67:40:1b:24:53:4a:28:eb:fa:57:93:fb:b5:a1:75:f8:
72:0d:83:73:b2:40:03:61:8a:ec:ce:b7:f7:9d:44:64:33:e7:
ad:41:93:ce:37:6b:84:0a:5b:22:3f:20:a3:cc:5c:f0:2e:ff:
1e:1a:b7:0f:0c:c3:5d:a7:59:c7:c7:2d:d6:04:ac:7b:d9:e0:
c7:99:a8:54:1c:d0:41:c5:e7:06:ea:e8:a6:80:c7:09:3a:9d:
70:72:dc:c8:0b:3e:10:c0:5a:6a:a6:89:0a:87:d9:5f:14:87:
43:f6:b8:68:ec:1b:0a:34:8c:d6:fe:d8:f6:55:d3:54:5e:7c:
e9:c2:a0:45:22:a3:78:7b:a7:00:07:44:19:a2:bc:29:7f:50:
2e:41:d9:3c:ad:1b:73:f9:9f:e7:69:66:d6:89:3c:aa:69:8b:
f8:4a:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 00:10:36 2026 by rpki-client